Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8138EB40E5F11F1A7522FEDDAE4EC9C.roa
File: A8138EB40E5F11F1A7522FEDDAE4EC9C.roa (raw, json)
Hash identifier: +0p8DFP+5ERVe98OnKwxzHKBtXr3bK3RFycavO5iPDU=
Subject key identifier: DC:2E:7B:15:4E:3C:57:F0:C0:7A:56:B9:63:99:0D:73:BB:5A:E8:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA7A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8138EB40E5F11F1A7522FEDDAE4EC9C.roa
Signing time: Fri 20 Feb 2026 13:25:43 +0000
ROA not before: Fri 20 Feb 2026 13:25:38 +0000
ROA not after: Fri 27 Mar 2026 13:25:38 +0000
asID: 138915
IP address blocks: 154.203.128.0/23 maxlen: 24
154.203.130.0/23 maxlen: 24
154.203.132.0/24 maxlen: 24
154.203.133.0/24 maxlen: 24
154.203.134.0/24 maxlen: 24
154.203.136.0/24 maxlen: 24
154.206.116.0/23 maxlen: 24
154.206.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113274 (0x1ba7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 13:25:38 2026 GMT
Not After : Mar 27 13:25:38 2026 GMT
Subject: CN=699860d7-944c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:98:a4:88:8b:da:19:60:f4:c3:a1:f2:6e:e3:
eb:64:f5:d0:bc:2e:22:16:18:95:34:54:8f:4c:77:
21:61:16:86:d2:d8:6e:5b:f0:c3:7e:26:05:0d:6a:
39:04:e6:8b:95:11:e8:31:d2:5c:d0:d6:7d:76:ad:
20:32:03:26:00:8a:aa:92:85:92:86:c5:d3:e6:d8:
66:2b:64:c7:e9:da:32:f6:df:af:92:15:90:bc:f4:
7d:71:fd:1b:1b:a5:6e:01:e0:20:d2:68:f4:b8:e5:
6f:5f:d2:e1:1c:ec:f2:30:78:42:3a:a5:54:17:60:
1b:ae:bb:08:2b:55:db:63:89:9c:29:44:ab:26:a4:
56:83:1f:ce:95:dd:b1:65:d7:2e:28:0a:ef:e9:31:
fa:0b:d3:99:3a:8e:d0:34:03:6d:e4:e7:52:2b:4e:
a9:bc:df:30:4b:a1:d5:80:5b:b0:f9:8a:e2:36:ec:
c3:27:fd:ae:09:12:71:bf:c6:85:86:84:c4:2a:fa:
c9:bd:df:c1:16:d9:fe:21:92:f6:24:87:c8:26:f0:
c8:02:83:51:f9:dc:67:8e:31:ea:52:9a:ba:05:f4:
01:db:ef:ba:fe:a0:f2:8b:e8:b3:fa:6e:9a:cf:3f:
d3:f5:ce:f5:b9:65:f2:0b:8d:99:e2:0d:f7:44:d8:
1c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2E:7B:15:4E:3C:57:F0:C0:7A:56:B9:63:99:0D:73:BB:5A:E8:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8138EB40E5F11F1A7522FEDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.128.0-154.203.134.255
154.203.136.0/24
154.206.116.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:55:7c:d7:ba:ac:81:c7:9e:f2:01:5d:6f:cc:ee:7b:b9:6d:
1c:7f:14:0d:d0:ea:b8:ec:d4:64:27:2b:78:e5:7c:07:05:09:
54:25:de:10:90:ce:38:6f:11:e5:ed:b8:cf:0a:2f:52:cc:76:
c6:fc:92:9e:53:2b:68:2f:7a:74:44:fa:cf:8a:62:ab:9d:71:
a0:9a:7f:26:64:da:55:ee:d5:6a:3b:a9:78:13:b6:ca:7a:cc:
fc:c5:0a:02:5c:a2:4a:b6:5c:ea:e2:13:7d:ec:ee:ed:25:ca:
6e:a4:f0:9b:40:50:d1:2e:eb:20:d7:d6:79:18:8d:b6:cf:9c:
de:36:bc:f5:70:b3:30:88:e2:8d:20:9d:96:75:5f:d8:b2:0d:
5a:ce:35:ec:c7:a3:c6:0e:c0:cf:0b:18:cd:18:7a:ce:5a:f0:
d7:fc:f9:fd:40:d4:1e:08:45:38:e8:8e:28:49:99:c5:67:ea:
5c:99:35:2e:c1:d8:79:89:1f:de:6d:ca:38:e5:fb:93:6c:f5:
47:67:21:cb:2b:8b:a3:c0:dc:f0:48:0f:8e:b4:5a:05:76:cd:
5e:04:71:50:c9:85:12:e4:c1:8b:82:4f:0c:17:88:61:33:65:
d3:aa:4d:cd:96:6d:b6:99:63:6f:d3:78:58:6e:43:87:2d:51:
b6:d9:5a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:04 2026 by rpki-client